Beveiligingsadvies

CVE-2026-1710

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-31 04:25:32
Laatst bijgewerkt 2026-05-12 16:56:37
Toegewezen door Wordfence
CVSS-score 6.5
Status PUBLISHED

Beschrijving

The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_upe_appearance_ajax' function in all versions up to, and including, 10.5.1. This makes it possible for unauthenticated attackers to update plugin settings.